Implementation notes: amd64, whosthere, crypto_sign/hector

Computer: whosthere
Microarchitecture: amd64; KabyLake (806e9)
Architecture: amd64
CPU ID: GenuineIntel-000806e9-bfebfbff
SUPERCOP version: 20221122
Operation: crypto_sign
Primitive: hector

Compiler output

Implementation: T:ref
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

common.c: In file included from common.c:7:
common.c: In file included from ./common.h:12:
common.c: In file included from ./divclass.h:10:
common.c: In file included from ./field.h:7:
common.c: In file included from ./mpfq_2_113.h:5:
common.c: ./x86_64/mpfq_2_113.h:740:14: error: use of unknown builtin '__builtin_ia32_pslldqi128' [-Wimplicit-function-declaration]
common.c: r.s = t0 ^ SHLD(t1, 64);
common.c: ^
common.c: ./x86_64/mpfq_2_113.h:597:25: note: expanded from macro 'SHLD'
common.c: #define SHLD(x,r) (v2di)__builtin_ia32_pslldqi128 ((gcc43bugfix) (x),(r))
common.c: ^
common.c: ./x86_64/mpfq_2_113.h:740:14: error: invalid conversion between vector type 'v2di' (vector of 2 'uint64_t' values) and integer type 'int' of different size
common.c: r.s = t0 ^ SHLD(t1, 64);
common.c: ^~~~~~~~~~~~
common.c: ./x86_64/mpfq_2_113.h:597:19: note: expanded from macro 'SHLD'
common.c: #define SHLD(x,r) (v2di)__builtin_ia32_pslldqi128 ((gcc43bugfix) (x),(r))
common.c: ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
common.c: ./x86_64/mpfq_2_113.h:747:14: error: use of unknown builtin '__builtin_ia32_psrldqi128' [-Wimplicit-function-declaration]
common.c: r.s = t2 ^ SHRD(t1, 64);
common.c: ^
common.c: ./x86_64/mpfq_2_113.h:598:25: note: expanded from macro 'SHRD'
common.c: #define SHRD(x,r) (v2di)__builtin_ia32_psrldqi128 ((gcc43bugfix) (x),(r))
common.c: ^
common.c: ./x86_64/mpfq_2_113.h:747:14: error: invalid conversion between vector type 'v2di' (vector of 2 'uint64_t' values) and integer type 'int' of different size
common.c: r.s = t2 ^ SHRD(t1, 64);
common.c: ...

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref

Compiler output

Implementation: T:ref
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

common.c: In file included from common.h:12,
common.c: from common.c:7:
common.c: divclass.h:47:13: warning: inline function 'divclass_neg' declared but never defined
common.c: 47 | inline void divclass_neg(divclass rop, const divclass op);
common.c: | ^~~~~~~~~~~~
config.c: In file included from config.h:11,
config.c: from config.c:10:
config.c: divclass.h:47:13: warning: inline function 'divclass_neg' declared but never defined
config.c: 47 | inline void divclass_neg(divclass rop, const divclass op);
config.c: | ^~~~~~~~~~~~
conversion.c: In file included from conversion.c:9:
conversion.c: divclass.h:47:13: warning: inline function 'divclass_neg' declared but never defined
conversion.c: 47 | inline void divclass_neg(divclass rop, const divclass op);
conversion.c: | ^~~~~~~~~~~~
curve.c: In file included from config.h:11,
curve.c: from curve.c:7:
curve.c: divclass.h:47:13: warning: inline function 'divclass_neg' declared but never defined
curve.c: 47 | inline void divclass_neg(divclass rop, const divclass op);
curve.c: | ^~~~~~~~~~~~
divclass.c: In file included from ./mpfq_2_113.h:5,
divclass.c: from ./field.h:7,
divclass.c: from divclass.h:10,
divclass.c: from divclass.c:7:
divclass.c: ./x86_64/mpfq_2_113.h:17:18: warning: 'mpfq_2_113_set' is static but used in inline function 'divclass_negaff' which is not static
divclass.c: 17 | #define MPFQ_(X) mpfq_2_113_ ## X
divclass.c: | ^~~~~~~~~~~
divclass.c: ./mpfq_name_K.h:33:21: note: in expansion of macro 'MPFQ_'
divclass.c: 33 | #define Kset(a0,a1) MPFQ_(set) (K,a0,a1)
divclass.c: | ^~~~~
divclass.c: divclass.c:410:2: note: in expansion of macro 'Kset'
divclass.c: 410 | Kset(rop->m_V0,op->m_V0);
divclass.c: | ^~~~
divclass.c: ./x86_64/mpfq_2_113.h:17:18: warning: 'mpfq_2_113_set' is static but used in inline function 'divclass_negaff' which is not static
divclass.c: 17 | #define MPFQ_(X) mpfq_2_113_ ## X
divclass.c: | ^~~~~~~~~~~
divclass.c: ./mpfq_name_K.h:33:21: note: in expansion of macro 'MPFQ_'
divclass.c: 33 | #define Kset(a0,a1) MPFQ_(set) (K,a0,a1)
divclass.c: | ^~~~~
divclass.c: divclass.c:409:2: note: in expansion of macro 'Kset'
divclass.c: 409 | Kset(rop->m_V1,op->m_V1);
divclass.c: | ^~~~
divclass.c: ./x86_64/mpfq_2_113.h:17:18: warning: 'mpfq_2_113_set' is static but used in inline function 'divclass_negaff' which is not static
divclass.c: 17 | #define MPFQ_(X) mpfq_2_113_ ## X
divclass.c: | ^~~~~~~~~~~
divclass.c: ...
generator.c: In file included from config.h:11,
generator.c: from generator.c:10:
generator.c: divclass.h:47:13: warning: inline function 'divclass_neg' declared but never defined
generator.c: 47 | inline void divclass_neg(divclass rop, const divclass op);
generator.c: | ^~~~~~~~~~~~
hector_sig.c: In file included from config.h:11,
hector_sig.c: from hector_sig.c:13:
hector_sig.c: divclass.h:47:13: warning: inline function 'divclass_neg' declared but never defined
hector_sig.c: 47 | inline void divclass_neg(divclass rop, const divclass op);
hector_sig.c: | ^~~~~~~~~~~~
wnaf.c: In file included from config.h:11,
wnaf.c: from wnaf.c:10:
wnaf.c: divclass.h:47:13: warning: inline function 'divclass_neg' declared but never defined
wnaf.c: 47 | inline void divclass_neg(divclass rop, const divclass op);
wnaf.c: | ^~~~~~~~~~~~
try.c: /usr/bin/ld: libcrypto_sign_hector.a(config.o):(.bss+0x2b0): multiple definition of `p'; libcrypto_sign_hector.a(common.o):(.bss+0x2b0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(config.o):(.bss+0x2a0): multiple definition of `size_of_p'; libcrypto_sign_hector.a(common.o):(.bss+0x2a0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(config.o):(.bss+0x0): multiple definition of `generator_multiples2'; libcrypto_sign_hector.a(common.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(config.o):(.bss+0x8): multiple definition of `generator_multiples1'; libcrypto_sign_hector.a(common.o):(.bss+0x8): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(config.o):(.bss+0x20): multiple definition of `dummyelts'; libcrypto_sign_hector.a(common.o):(.bss+0x20): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(config.o):(.bss+0x2c0): multiple definition of `f0'; libcrypto_sign_hector.a(common.o):(.bss+0x2c0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(config.o):(.bss+0x2d0): multiple definition of `f3'; libcrypto_sign_hector.a(common.o):(.bss+0x2d0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(config.o):(.bss+0x2e0): multiple definition of `K'; libcrypto_sign_hector.a(common.o):(.bss+0x2e0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(curve.o):(.bss+0x2b0): multiple definition of `f3'; libcrypto_sign_hector.a(common.o):(.bss+0x2d0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(curve.o):(.bss+0x2a0): multiple definition of `f0'; libcrypto_sign_hector.a(common.o):(.bss+0x2c0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(curve.o):(.bss+0x0): multiple definition of `dummyelts'; libcrypto_sign_hector.a(common.o):(.bss+0x20): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(curve.o):(.bss+0x280): multiple definition of `size_of_p'; libcrypto_sign_hector.a(common.o):(.bss+0x2a0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(curve.o):(.bss+0x290): multiple definition of `p'; libcrypto_sign_hector.a(common.o):(.bss+0x2b0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(curve.o):(.bss+0x2c0): multiple definition of `K'; libcrypto_sign_hector.a(common.o):(.bss+0x2e0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(divclass.o):(.bss+0x0): multiple definition of `dummyelts'; libcrypto_sign_hector.a(common.o):(.bss+0x20): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(divclass.o):(.bss+0x2b0): multiple definition of `f3'; libcrypto_sign_hector.a(common.o):(.bss+0x2d0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(divclass.o):(.bss+0x2a0): multiple definition of `f0'; libcrypto_sign_hector.a(common.o):(.bss+0x2c0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(divclass.o):(.bss+0x2c0): multiple definition of `K'; libcrypto_sign_hector.a(common.o):(.bss+0x2e0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(divclass.o):(.bss+0x280): multiple definition of `size_of_p'; libcrypto_sign_hector.a(common.o):(.bss+0x2a0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(divclass.o):(.bss+0x290): multiple definition of `p'; libcrypto_sign_hector.a(common.o):(.bss+0x2b0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(generator.o):(.bss+0x8): multiple definition of `generator_multiples1'; libcrypto_sign_hector.a(common.o):(.bss+0x8): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(generator.o):(.bss+0x0): multiple definition of `generator_multiples2'; libcrypto_sign_hector.a(common.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(generator.o):(.bss+0x20): multiple definition of `dummyelts'; libcrypto_sign_hector.a(common.o):(.bss+0x20): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(generator.o):(.bss+0x2a0): multiple definition of `size_of_p'; libcrypto_sign_hector.a(common.o):(.bss+0x2a0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(generator.o):(.bss+0x2b0): multiple definition of `p'; libcrypto_sign_hector.a(common.o):(.bss+0x2b0): first defined here
try.c: ...

Number of similar (compiler,implementation) pairs: 3, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref

Compiler output

Implementation: T:ref
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE

common.c: In file included from common.h:12,
common.c: from common.c:7:
common.c: divclass.h:47:13: warning: inline function 'divclass_neg' declared but never defined
common.c: 47 | inline void divclass_neg(divclass rop, const divclass op);
common.c: | ^~~~~~~~~~~~
config.c: In file included from config.h:11,
config.c: from config.c:10:
config.c: divclass.h:47:13: warning: inline function 'divclass_neg' declared but never defined
config.c: 47 | inline void divclass_neg(divclass rop, const divclass op);
config.c: | ^~~~~~~~~~~~
conversion.c: In file included from conversion.c:9:
conversion.c: divclass.h:47:13: warning: inline function 'divclass_neg' declared but never defined
conversion.c: 47 | inline void divclass_neg(divclass rop, const divclass op);
conversion.c: | ^~~~~~~~~~~~
curve.c: In file included from config.h:11,
curve.c: from curve.c:7:
curve.c: divclass.h:47:13: warning: inline function 'divclass_neg' declared but never defined
curve.c: 47 | inline void divclass_neg(divclass rop, const divclass op);
curve.c: | ^~~~~~~~~~~~
divclass.c: In file included from ./mpfq_2_113.h:5,
divclass.c: from ./field.h:7,
divclass.c: from divclass.h:10,
divclass.c: from divclass.c:7:
divclass.c: ./x86_64/mpfq_2_113.h:17:18: warning: 'mpfq_2_113_set' is static but used in inline function 'divclass_negaff' which is not static
divclass.c: 17 | #define MPFQ_(X) mpfq_2_113_ ## X
divclass.c: | ^~~~~~~~~~~
divclass.c: ./mpfq_name_K.h:33:21: note: in expansion of macro 'MPFQ_'
divclass.c: 33 | #define Kset(a0,a1) MPFQ_(set) (K,a0,a1)
divclass.c: | ^~~~~
divclass.c: divclass.c:410:2: note: in expansion of macro 'Kset'
divclass.c: 410 | Kset(rop->m_V0,op->m_V0);
divclass.c: | ^~~~
divclass.c: ./x86_64/mpfq_2_113.h:17:18: warning: 'mpfq_2_113_set' is static but used in inline function 'divclass_negaff' which is not static
divclass.c: 17 | #define MPFQ_(X) mpfq_2_113_ ## X
divclass.c: | ^~~~~~~~~~~
divclass.c: ./mpfq_name_K.h:33:21: note: in expansion of macro 'MPFQ_'
divclass.c: 33 | #define Kset(a0,a1) MPFQ_(set) (K,a0,a1)
divclass.c: | ^~~~~
divclass.c: divclass.c:409:2: note: in expansion of macro 'Kset'
divclass.c: 409 | Kset(rop->m_V1,op->m_V1);
divclass.c: | ^~~~
divclass.c: ./x86_64/mpfq_2_113.h:17:18: warning: 'mpfq_2_113_set' is static but used in inline function 'divclass_negaff' which is not static
divclass.c: 17 | #define MPFQ_(X) mpfq_2_113_ ## X
divclass.c: | ^~~~~~~~~~~
divclass.c: ...
generator.c: In file included from config.h:11,
generator.c: from generator.c:10:
generator.c: divclass.h:47:13: warning: inline function 'divclass_neg' declared but never defined
generator.c: 47 | inline void divclass_neg(divclass rop, const divclass op);
generator.c: | ^~~~~~~~~~~~
hector_sig.c: In file included from config.h:11,
hector_sig.c: from hector_sig.c:13:
hector_sig.c: divclass.h:47:13: warning: inline function 'divclass_neg' declared but never defined
hector_sig.c: 47 | inline void divclass_neg(divclass rop, const divclass op);
hector_sig.c: | ^~~~~~~~~~~~
wnaf.c: In file included from config.h:11,
wnaf.c: from wnaf.c:10:
wnaf.c: divclass.h:47:13: warning: inline function 'divclass_neg' declared but never defined
wnaf.c: 47 | inline void divclass_neg(divclass rop, const divclass op);
wnaf.c: | ^~~~~~~~~~~~
try.c: /usr/bin/ld: libcrypto_sign_hector.a(config.o):(.bss+0x2b0): multiple definition of `p'; libcrypto_sign_hector.a(common.o):(.bss+0x2b0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(config.o):(.bss+0x2a0): multiple definition of `size_of_p'; libcrypto_sign_hector.a(common.o):(.bss+0x2a0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(config.o):(.bss+0x0): multiple definition of `generator_multiples2'; libcrypto_sign_hector.a(common.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(config.o):(.bss+0x8): multiple definition of `generator_multiples1'; libcrypto_sign_hector.a(common.o):(.bss+0x8): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(config.o):(.bss+0x20): multiple definition of `dummyelts'; libcrypto_sign_hector.a(common.o):(.bss+0x20): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(config.o):(.bss+0x2c0): multiple definition of `f0'; libcrypto_sign_hector.a(common.o):(.bss+0x2c0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(config.o):(.bss+0x2d0): multiple definition of `f3'; libcrypto_sign_hector.a(common.o):(.bss+0x2d0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(config.o):(.bss+0x2e0): multiple definition of `K'; libcrypto_sign_hector.a(common.o):(.bss+0x2e0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(curve.o):(.bss+0x2b0): multiple definition of `f3'; libcrypto_sign_hector.a(common.o):(.bss+0x2d0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(curve.o):(.bss+0x2a0): multiple definition of `f0'; libcrypto_sign_hector.a(common.o):(.bss+0x2c0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(curve.o):(.bss+0x0): multiple definition of `dummyelts'; libcrypto_sign_hector.a(common.o):(.bss+0x20): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(curve.o):(.bss+0x280): multiple definition of `size_of_p'; libcrypto_sign_hector.a(common.o):(.bss+0x2a0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(curve.o):(.bss+0x290): multiple definition of `p'; libcrypto_sign_hector.a(common.o):(.bss+0x2b0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(curve.o):(.bss+0x2c0): multiple definition of `K'; libcrypto_sign_hector.a(common.o):(.bss+0x2e0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(divclass.o):(.bss+0x0): multiple definition of `dummyelts'; libcrypto_sign_hector.a(common.o):(.bss+0x20): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(divclass.o):(.bss+0x2c0): multiple definition of `K'; libcrypto_sign_hector.a(common.o):(.bss+0x2e0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(divclass.o):(.bss+0x2b0): multiple definition of `f3'; libcrypto_sign_hector.a(common.o):(.bss+0x2d0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(divclass.o):(.bss+0x2a0): multiple definition of `f0'; libcrypto_sign_hector.a(common.o):(.bss+0x2c0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(divclass.o):(.bss+0x280): multiple definition of `size_of_p'; libcrypto_sign_hector.a(common.o):(.bss+0x2a0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(divclass.o):(.bss+0x290): multiple definition of `p'; libcrypto_sign_hector.a(common.o):(.bss+0x2b0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(generator.o):(.bss+0x8): multiple definition of `generator_multiples1'; libcrypto_sign_hector.a(common.o):(.bss+0x8): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(generator.o):(.bss+0x0): multiple definition of `generator_multiples2'; libcrypto_sign_hector.a(common.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(generator.o):(.bss+0x2e0): multiple definition of `K'; libcrypto_sign_hector.a(common.o):(.bss+0x2e0): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(generator.o):(.bss+0x20): multiple definition of `dummyelts'; libcrypto_sign_hector.a(common.o):(.bss+0x20): first defined here
try.c: /usr/bin/ld: libcrypto_sign_hector.a(generator.o):(.bss+0x2a0): multiple definition of `size_of_p'; libcrypto_sign_hector.a(common.o):(.bss+0x2a0): first defined here
try.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref